Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/QS3FE4Eoc-e9SErqsvWtt6mWCLw.roa
File: QS3FE4Eoc-e9SErqsvWtt6mWCLw.roa (raw, json)
Hash identifier: aH5OWNZYYTzcx0pUmTGmm/tVmbqUQxmRkgjjTyaIbHQ=
Subject key identifier: 41:2D:C5:13:81:28:73:E7:BD:48:4A:EA:B2:F5:AD:B7:A9:96:08:BC
Certificate issuer: /CN=0134c97fbb0486b5c66d13cab1a8b298460521db
Certificate serial: 018CC9BCF0D724ED8CBC121FB60D174E6628
Authority key identifier: 01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/QS3FE4Eoc-e9SErqsvWtt6mWCLw.roa
Signing time: Tue 02 Jan 2024 10:34:11 +0000
ROA not before: Tue 02 Jan 2024 10:34:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 2001:67c:2c3c::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:f0:d7:24:ed:8c:bc:12:1f:b6:0d:17:4e:66:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0134c97fbb0486b5c66d13cab1a8b298460521db
Validity
Not Before: Jan 2 10:34:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=412dc513812873e7bd484aeab2f5adb7a99608bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:82:47:b9:51:24:9f:88:81:ac:81:ab:fc:47:
91:fa:d2:ef:bd:44:95:16:59:98:26:c8:9b:0e:7f:
15:ed:dc:90:fa:5a:b6:b9:0f:44:b9:d2:2a:25:c6:
0e:ca:31:79:94:1f:14:c5:bc:41:cb:41:be:2b:8a:
c5:c8:47:2b:ce:d1:cb:3a:82:04:d4:ce:a3:48:c8:
f1:bb:d4:a7:cb:52:25:f0:52:dc:80:2b:ce:bf:05:
2e:b2:be:dc:ab:f6:89:b6:7e:98:4b:27:c2:50:cf:
ae:e2:fd:f8:29:13:4e:a7:5f:d7:92:4e:80:c6:2c:
7f:53:7b:64:c3:5b:30:0a:fd:c9:49:66:d1:32:67:
b8:0d:42:02:19:cf:d5:4c:53:44:f6:37:be:17:ef:
0b:3b:b6:ba:23:4e:e0:95:dd:90:b5:1f:a7:d0:53:
57:b7:fb:fb:d0:d7:01:a3:ea:b7:50:0b:c0:6a:04:
fe:7f:57:be:84:f5:7a:bf:b1:0b:cb:d8:93:60:cc:
2a:12:4b:b0:4a:f1:60:57:76:7e:e5:55:72:e4:d8:
aa:1a:70:11:53:36:2e:ef:c4:3a:61:c3:4a:70:44:
e3:a7:f9:e1:b8:9d:b3:4c:73:35:25:8e:d1:fb:19:
18:8b:7e:f1:c2:4b:a0:49:c4:ab:91:50:1c:01:c3:
6b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2D:C5:13:81:28:73:E7:BD:48:4A:EA:B2:F5:AD:B7:A9:96:08:BC
X509v3 Authority Key Identifier:
keyid:01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/QS3FE4Eoc-e9SErqsvWtt6mWCLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2c3c::/48
Signature Algorithm: sha256WithRSAEncryption
ab:d4:6b:a3:39:28:34:0c:7a:b8:c5:9b:4b:f9:35:0a:f6:a4:
46:52:d0:e5:19:db:aa:09:1c:54:1f:8f:e4:2e:ef:64:38:2a:
24:d4:be:ca:bc:55:7f:06:44:01:1d:4d:73:fc:06:e6:11:22:
4f:b8:25:53:95:d6:dd:d9:b5:dd:73:be:db:54:0c:96:76:7d:
68:76:e3:37:64:77:5f:80:e4:98:92:0d:43:1f:a6:58:d8:5c:
31:4c:1e:99:fa:2b:ff:09:7d:a7:69:96:80:bf:0f:62:53:00:
01:1c:09:22:b7:3d:ff:ef:f3:45:72:f4:29:dc:9a:bd:cc:23:
23:c0:06:0a:71:2d:dc:86:e7:82:20:9b:a2:dc:d0:18:97:bc:
3b:32:c7:47:74:83:15:12:6c:3a:84:7f:ff:e3:cc:87:42:32:
80:80:84:44:a1:23:c5:ee:76:3d:42:b7:44:f1:54:52:82:e1:
4c:6b:7d:d0:13:21:10:df:4d:d0:83:90:88:86:bb:ee:3d:cf:
e3:1a:c6:82:f4:5e:67:ea:60:ab:ab:b0:79:4d:06:51:97:21:
da:ee:35:04:26:09:64:29:ee:68:a9:d4:f5:7a:48:ad:3d:f0:
31:60:fd:31:82:72:4e:34:e9:7c:f1:eb:bf:8a:23:00:8b:58:
3b:84:86:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:39:46 2025 by rpki-client